The Osmosis team confirmed the bug let malicious users drain about $5 million worth of assets from liquidity pools.
